
When a legitimate user accepted an invitation into a malicious organization, the attacker leveraged a shared session structure to pivot laterally into every other organization that the user was authorized to manage. This critical logic flaw within the Brevo marketing platform transformed a routine administrative feature into a potent weapon for a massive cryptocurrency phishing campaign. By exploiting the way










